๐Ÿ”ช Slice For Life - Part 2 ๐Ÿ”ช
3.47K subscribers
903 photos
22 videos
723 links
Download Telegram
๐Ÿšจ๐Ÿ‡จ๐Ÿ‡ด CNE (National Electoral Council) allegedly targeted by EsqueleSquad

A threat actor on an underground forum, attributing the leak to a group called EsqueleSquad, is claiming to have obtained confidential material directly from the CNE (Consejo Nacional Electoral), Colombia's National Electoral Council, and related sources. The actor timed the post to coincide with Colombia's elections.

The actor claims to hold internal confidential documents and campaign financing records.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข CNE internal confidential documents (internal reports, audit findings, formal complaints about electoral irregularities)
โ€ข Sensitive correspondence between CNE officials and campaign teams
โ€ข Documents showing weaknesses and anomalies in the voter registry and polling stations
โ€ข 2026 campaign financing records (declared and hidden donor lists)
โ€ข Alleged dark money movements and suspicious transfers
โ€ข Ghost companies and large contracts awarded to campaign donors
โ€ข Discrepancies between official reports and actual financial movements

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: CNE (Consejo Nacional Electoral)
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Colombia ๐Ÿ‡จ๐Ÿ‡ด
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Government / Elections
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Hydr0gen (EsqueleSquad)
๐—–๐—น๐—ฎ๐—ถ๐—บ: Confidential electoral documents and campaign financing records
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: Internal documents and financial records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 30, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค1
๐Ÿšจ๐Ÿ‡ฎ๐Ÿ‡ณ Mydukaan allegedly targeted in massive breach exposing 100M users

A threat actor on an underground forum is claiming to sell a full database dump allegedly originating from Mydukaan, an e-commerce platform (described as similar to Shopify) widely used in India.

The actor claims the dump contains roughly 100M users, including purchase history and encrypted payment API keys.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Usernames, first and last names
โ€ข Email addresses
โ€ข Phone numbers
โ€ข Passwords and account status fields
โ€ข Full buyer addresses (line, city, state, pin, country)
โ€ข Purchase and transaction history
โ€ข Order, store lead, and seller data
โ€ข Encrypted payment API keys
โ€ข Activity logs and reseller SKU mapping

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Mydukaan
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: India ๐Ÿ‡ฎ๐Ÿ‡ณ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Retail / E-commerce
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: stalker8083
๐—–๐—น๐—ฎ๐—ถ๐—บ: Full database dump
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~100M users
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: $10,000 (open to negotiation)

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ฎ๐Ÿ‡ฉ Ratakan allegedly targeted in free database leak exposing 80K records

A threat actor on an underground forum is claiming to have published a database allegedly originating from Ratakan, an Indonesian digital marketplace and affiliate sales platform. The actor is releasing the data for free.

The actor claims the leak contains roughly 80K records across user and sales data.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Usernames and full names
โ€ข Email addresses
โ€ข Phone numbers
โ€ข Passwords (plaintext and hashed)
โ€ข Login tokens and device IDs
โ€ข Account verification status
โ€ข Profile, avatar, and banner image paths
โ€ข Linked social media handles (Facebook, Instagram, Twitter, Google)
โ€ข Sales, vendor, buyer, and affiliate commission data
โ€ข Purchase status and payment account fields

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Ratakan
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Indonesia ๐Ÿ‡ฎ๐Ÿ‡ฉ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Retail / E-commerce
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: Bambi
๐—–๐—น๐—ฎ๐—ถ๐—บ: Free database leak
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~80K records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 30, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡บ๐Ÿ‡ธ Bridges Bay Resort allegedly targeted in database leak

A threat actor on an underground forum is claiming to have leaked a database allegedly originating from Bridges Bay Resort, a lakeside resort and waterpark located in Okoboji, Iowa. The actor is releasing the data for free.

The actor claims the leak contains 52,744 visitors and 85 users.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Visitor and user names
โ€ข Email addresses
โ€ข Phone numbers
โ€ข Visitor consent and signature fields
โ€ข Room numbers
โ€ข Document/PDF links (hosted on S3)
โ€ข User agents and source data
โ€ข Account creation and update timestamps
โ€ข Approval status and member counts

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Bridges Bay Resort
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: United States ๐Ÿ‡บ๐Ÿ‡ธ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Hospitality / Tourism
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: MirrorShell
๐—–๐—น๐—ฎ๐—ถ๐—บ: Leaked database
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 52,744 visitors and 85 users
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡บ๐Ÿ‡ธ MoniCare allegedly targeted in breach exposing 40K+ consumers

A threat actor on an underground forum is claiming to sell a dataset allegedly originating from MoniCare, a Chicago-based domestic staffing agency that places professional nannies, babysitters, housekeepers, household managers, personal assistants, and caregivers.

The actor claims the breach contains over 40K consumer records along with a collection of identity documents.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Full names
โ€ข Email addresses
โ€ข Phone numbers
โ€ข Addresses
โ€ข Ages
โ€ข PDF document attachments (driver's licenses, identification cards, passports, resumes, reference letters, vaccination cards)

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: MoniCare
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: United States ๐Ÿ‡บ๐Ÿ‡ธ
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Staffing / Domestic Services
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: 2019
๐—–๐—น๐—ฎ๐—ถ๐—บ: Leaked consumer database and identity documents
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 40K+ records (2 datasets)
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ซ๐Ÿ‡ท Air Austral allegedly targeted in database leak

A threat actor on an underground forum is claiming to have leaked a database allegedly originating from Air Austral, a French airline specializing in flights between the Indian Ocean, metropolitan France, southern Africa, and certain Asian destinations. The actor is releasing the data for free.

The actor claims the leak contains roughly 1K records in JSON format (~125 KB), appearing to be employee/staff data.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข First and last names
โ€ข Email addresses
โ€ข Job titles (fonction)
โ€ข Department/service
โ€ข Location (localisation)

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Air Austral
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: France ๐Ÿ‡ซ๐Ÿ‡ท
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Aviation / Airline
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: ChimeraZ
๐—–๐—น๐—ฎ๐—ถ๐—บ: Leaked database
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~1K records (~125 KB)
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ฌ๐Ÿ‡ง๐Ÿ‡ฎ๐Ÿ‡ช Nando's allegedly targeted in employee database breach

A threat actor on an underground forum is claiming to sell an employee database allegedly originating from Nando's, the restaurant chain. The actor says the breach occurred as of May 30, 2026, and the data consists mainly of UK and Irish employees.

The actor claims the database contains 87,000 records of past and current "Nandoca" employees.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Full names
โ€ข Job titles and supervisory groups
โ€ข Business and personal email addresses
โ€ข Mobile and landline phone numbers
โ€ข Employment locations
โ€ข Employee roles
โ€ข Business locations and numbers
โ€ข Cost center information
โ€ข Job listing information including salaries

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Nando's
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง / Ireland ๐Ÿ‡ฎ๐Ÿ‡ช
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Retail / Restaurant
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: failing2
๐—–๐—น๐—ฎ๐—ถ๐—บ: Leaked employee database
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 87,000 records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: $1,000
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ FedEx account checker tool advertised on underground forum

A threat actor on an underground forum is advertising a FedEx "mail pass" account checker, a credential-stuffing tool designed to validate stolen email/password combinations against FedEx accounts. The seller markets it as request-based with updated API handling and anti-bot bypass.

The listing promotes the tool to other forum members and claims it can pull account profile data from validated logins.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฏ๐—ฒ๐—ถ๐—ป๐—ด ๐—ฎ๐—ฑ๐˜ƒ๐—ฒ๐—ฟ๐˜๐—ถ๐˜€๐—ฒ๐—ฑ:

โ€ข A request-based credential checker targeting FedEx accounts
โ€ข Claimed anti-bot / WAF bypass handling
โ€ข Automated validation of email:password combolists
โ€ข Capture of account profile details from valid logins (name, contact info, address, account balance fields)
โ€ข Marketed throughput of several hundred checks per minute
โ€ข Sold as a single GO script copy

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: FedEx (account checker tooling)
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Cybercrime Tooling
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: DataKernel
๐—–๐—น๐—ฎ๐—ถ๐—บ: Selling FedEx credential-checking tool
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: Account-validation / credential-stuffing tool
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Single copy (middleman accepted)
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ซ๐Ÿ‡ท Avantages Enseignants allegedly targeted in 126K database leak

A threat actor on an underground forum is claiming to have leaked a database allegedly originating from Avantages Enseignants, a French platform dedicated to education professionals (teachers and staff in the National Education system).

The actor claims the leak contains roughly 126K records across customer and account data.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข First and last names
โ€ข Email addresses
โ€ข Passwords (hashed)
โ€ข Telephone numbers
โ€ข IP addresses
โ€ข Fax and cart data
โ€ข Tokens and codes
โ€ข Account status and approval fields
โ€ข Wishlist and custom field data
โ€ข Profile pictures and newsletter status
โ€ข Account creation and reminder timestamps

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Avantages Enseignants
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: France ๐Ÿ‡ซ๐Ÿ‡ท
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Education
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: kvantize
๐—–๐—น๐—ฎ๐—ถ๐—บ: Leaked database
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~126K records
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: 1 Point
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡จ๐Ÿ‡ด GamaSoft allegedly targeted in 150GB+ data breach

A threat actor on an underground forum is claiming to have exfiltrated data allegedly originating from GamaSoft, a Colombian company specializing in POS software for the food and beverage sector. The actor notes the company has over 25 years of experience, more than 4,200 installations across Colombia, and generates over 6 million invoices monthly.

The actor claims to have exfiltrated over 150 GB of data including software installers, databases, backups, invoices, and inventory information.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Client and contact names
โ€ข Email addresses
โ€ข Phone and mobile numbers
โ€ข Addresses and municipality data
โ€ข Representative names and identity documents
โ€ข Business/owner details and roles
โ€ข Tax and franchise data
โ€ข Software installers and client databases
โ€ข MySQL dumps (.csv, .sql) and backups from 2015 to 2017
โ€ข PDF and XML invoices (facturas)
โ€ข Support folder, activators, and software backups

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: GamaSoft
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Colombia ๐Ÿ‡จ๐Ÿ‡ด
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Technology / POS Software
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: tillthaend
๐—–๐—น๐—ฎ๐—ถ๐—บ: Exfiltrated databases, clients, and software
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 150 GB+ of data
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: Free (reply to unlock)
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
๐Ÿšจ๐Ÿ‡ฎ๐Ÿ‡ท Hajj and Pilgrimage Organization allegedly targeted in breach exposing 168M+ records for $80,000 BTC

A threat actor on an underground forum is claiming to sell a database allegedly originating from the Hajj and Pilgrimage Organization in Iran, the government body managing pilgrimage travel.

The actor claims the dataset contains more than 168 million records spanning 1984 to 2024.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Full names, father's name, dates and places of birth
โ€ข National codes (SSN), ID numbers, national card serial numbers
โ€ข Marital status and occupation
โ€ข Contact information (home/work addresses, postal codes, phone numbers)
โ€ข Passport details (number, issue/expiration dates) and passport scans
โ€ข Traveler photos
โ€ข Travel flight and insurance information
โ€ข Security deposit and banking/payment documents
โ€ข Pilgrimage broker and accommodation information
โ€ข Details of government officials, NAJA forces, Basij forces, and clerics
โ€ข Allocated quota data (including martyr families)
โ€ข Source code of Hajj apps and services

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: Hajj and Pilgrimage Organization of Iran
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Iran ๐Ÿ‡ฎ๐Ÿ‡ท
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Government
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: irleak
๐—–๐—น๐—ฎ๐—ถ๐—บ: Database for sale
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: 168M+ records (1984 to 2024)
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: $80,000 BTC
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations
โค1
๐Ÿšจ๐Ÿ‡ต๐Ÿ‡ช DIRANDRO (Peruvian National Police) allegedly targeted by L4TAMFUCK3RS

A threat actor group on an underground forum, identifying as L4TAMFUCK3RS, is claiming to sell a full database allegedly originating from DIRANDRO, the specialized anti-drug-trafficking division of the Peruvian National Police (Policรญa Nacional del Perรบ). The actors claim all police/military personnel records are included.

The actors claim the database contains roughly 300K folders (people) totaling about 7.8 GB.

๐—ช๐—ต๐—ฎ๐˜'๐˜€ ๐—ฎ๐—น๐—น๐—ฒ๐—ด๐—ฒ๐—ฑ๐—น๐˜† ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ:

โ€ข Full names, surnames, national ID numbers (DNI), and police ID codes (CIP)
โ€ข Dates of birth, gender, marital status, education level
โ€ข Parents' full names
โ€ข Full residential addresses
โ€ข Civil registry data and identification codes (NIF)
โ€ข Police intervention/operation details and incident narratives
โ€ข Exact event coordinates and penitentiary facility references
โ€ข Seized substance details and evidence labels
โ€ข Detained individuals' names, ages, and DNI numbers
โ€ข Document metadata and institutional info (PNP, INPE, Public Prosecutor)
โ€ข Internal personnel records (CIP, DNI, names, registration dates)
โ€ข Scanned national ID document images and photographs
โ€ข Military-related records

๐——๐—ฒ๐˜๐—ฎ๐—ถ๐—น๐˜€:

๐—ง๐—ฎ๐—ฟ๐—ด๐—ฒ๐˜: DIRANDRO (Policรญa Nacional del Perรบ)
๐—–๐—ผ๐˜‚๐—ป๐˜๐—ฟ๐˜†: Peru ๐Ÿ‡ต๐Ÿ‡ช
๐—ฆ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ: Government / Law Enforcement
๐—”๐—ฐ๐˜๐—ผ๐—ฟ: cantpwn (L4TAMFUCK3RS)
๐—–๐—น๐—ฎ๐—ถ๐—บ: Full police database for sale
๐—˜๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ~300K folders/people (~7.8 GB)
๐—ฃ๐—ฟ๐—ถ๐—ฐ๐—ฒ: $700
๐—ข๐—ฏ๐˜€๐—ฒ๐—ฟ๐˜ƒ๐—ฒ๐—ฑ: May 31, 2026

๐Ÿ’ฅ Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________

Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations